Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Switchport Traffic capture

Hi I have a Cisco Catalyst WS-C3548-XL-EN. My company has third party software that resides on our desktop machines that enables remote session within the LAN. some users think that there is something scanning our netowork and trying to connect remotely within the network. Is their a way that I can mirror a port to another and capture the traffic or look at a specfic port and see what is trying to connect?

TIA

Mike

1 ACCEPTED SOLUTION

Accepted Solutions

Re: Switchport Traffic capture

Mike,

The 3550XL series switches are a little different than most other switches to SPAN switchports. Make sure the user port and the sniffer port is on the same VLAN. Here is an example of spanning a port where 0/1 is the user, and 0/2 is the sniffer.

int fa0/2

port monitor fa0/1

Mark

1 REPLY

Re: Switchport Traffic capture

Mike,

The 3550XL series switches are a little different than most other switches to SPAN switchports. Make sure the user port and the sniffer port is on the same VLAN. Here is an example of spanning a port where 0/1 is the user, and 0/2 is the sniffer.

int fa0/2

port monitor fa0/1

Mark

123
Views
0
Helpful
1
Replies